Top Banner
Appliance Comparison Chart
14

Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

May 18, 2018

Download

Documents

lydang
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

Appliance Comparison Chart

Page 2: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 2

Appliance Comparison Chart

June 7, 2016

1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protection

2 Performance measured with default/maximum memory

3200 5200 5400 5600 5800

Branch Office Small Enterprise Mid-Size Enterprise

Production Performance (Real-World Traffic Blend)SecurityPower 250 425 600 950 1750

Firewall (Gbps) 2.1 5.3 10 17.5 22

IPS Throughput (Gbps) 460 Mbps 810 Mbps 1.08 1.9 3.05

NGFW Throughput (Gbps) 260 Mbps 520 Mbps 690 Mbps 1.18 2

Threat Prevention (Gbps) 140 Mbps 250 Mbps 330 Mbps 540 Mbps 1

Ideal Testing Conditions Performance (RFC 3511, 2544, 2647, 1242 )Firewall Throughput (Gbps) 4 16 22 25 35

Connections Per Second (K) 48 125 150 185 185

Concurrent Sessions (M)1 3.2 3.2/6.4 3.2/6.4 3.2/6.4 3.2/6.4

VPN Throughput (Gbps) 2.25 1.88 2.16 6.5 10

IPS Throughput (Gbps) 1.44 3 3.9 7.8 10

NGFW Throughput (Gbps) 1.15 2.7 3.4 5.8 8.1

Network10/100/1000Base-T (Base/Max) 6/6 6/14 10/18 10/18 10/26

1000Base-F SFP (Base/Max) NA 0/4 0/4 0/4 0/8

10GBase-F SFP+ (Base/Max) NA 0/0 0/0 0/4 0/8

40GB QSFP (Base/Max) NA NA NA NA 0/4

Expansion Slot NA 1 1 1 2

Fail-Over NIC Option NA Yes Yes Yes Yes

Additional FeaturesStorage 1x 320 GB 1x 500 GB 1x 500 GB 1x 500 GB 1x 500 GB

Memory Options (GB) 8 8, 16 8, 16 8, 16 8, 16

LOM Card NA Optional Optional Optional Included

Virtual SystemsMaximum (base/HPP)2 10 10/20 10/20 10/20 10/20

PhysicalEnclosure Desktop 1U 1U 1U 1U

Weight 1.3kg (2.9 lbs) 6.22kg (13.7 lbs) 6.37kg (14 lbs) 7.95kg (17.53 lbs) 8.37kg (18.45 lbs)

PowerDual, Hot-Swappable Power Supplies NA NA NA Optional Optional

Power Input 90-264V, 47-63 Hz

Single Power Supply Rating 40W 250W 250W 275W 275W

Power Consumption (Max) 29.5W 62.9W 76.5W 103W 110W

Security Gateway Appliances

Page 3: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 3

Appliance Comparison Chart

June 7, 2016

1 Assumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protection 2 Performance measured with default/maximum memory

15400 15600 23500 23800

Large Enterprise Data Center Grade

Production Performance (Real-World Traffic Blend)1

SecurityPower 2600 3850 4900 6200

Firewall (Gbps) 30 30 34 43

IPS Throughput (Gbps) 4.5 8 10 12

NGFW Throughput (Gbps) 3 5.2 6.3 7.2

Threat Prevention (Gbps) 1.5 2.5 2.9 3.6

Ideal Testing Conditions Performance (RFC 3511, 2544, 2647, 1242)Firewall Throughput (Gbps) 58 77 116 128

Connections Per Second (K) 185 185 200 200

Concurrent Sessions (M)2 3.2/9.6 6.4/12.8 6.4/25.6 12.8/28

VPN Throughput (Gbps) 10.8 15.8 26 26

IPS Throughput (Gbps) 14 18 22 30

NGFW Throughput (Gbps) 12 17 20 27

Network10/100/1000Base-T (Base/Max) 10/26 10/26 10/42 10/42

1000Base-F SFP (Base/Max) 0/12 0/12 0/20 0/20

10GBase-F SFP+ (Base/Max) 2/12 2/12 2/20 2/20

40GBase QSFP (Base/Max) 0/4 0/4 0/4 0/4

Expansion Slot 3 3 5 5

Fail-Open/Bypass NIC Option Yes Yes Yes Yes

Additional FeaturesStorage 1x 1TB 2x 1TB RAID1 2x 1TB RAID1 2x 1TB RAID1

Memory Options (GB) 8/24 16/32 16/64 32/64

LOM Card Included Included Included Included

LCD Display Graphic LCD Graphic LCD Graphic LCD Graphic LCD

Virtual SystemsMaximum (base/HPP)2 10/40 60/80 60/125 125/250

PhysicalEnclosure 2U 2U 2U 2U

Weight 14.3kg (31.5 lbs) 14.3kg (31.5 lbs) 15.8kg (34.8 lbs) 15.8 kg (34.8 lbs.)

PowerHot-Swappable Power Supplies Included Included Included Included

Power Input 90-264V, 47-63 Hz

Single Power Supply Rating 600W 600W 800W 800W

Power Consumption (Max) 263W 297W 383W 399W

Security Gateway Appliances continued

Page 4: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 4

Appliance Comparison Chart

June 7, 2016

1 Assumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protection

2 With memory upgrade and the GAiA OS 3 Via a Solutions Center request

2200 4200 4400 4600 4800

Small-Office Enterprise Grade

Production Performance (Real-World Traffic Blend)1

SecurityPower 121 121 230 405 673

Firewall (Gbps) 1.4 1.4 2.2 3.4 5.8

Firewall and IPS (Mbps) 150 165 360 630 1100

RFC 3511, 2544, 2647, 1242 Performance Tests (LAB) Firewall Throughput (Gbps) 3 3 5 9 11

VPN Throughput (Gbps) 0.4 0.4 1.2 1.5 2

IPS Recommended Profile (Gbps) 0.3 0.3 0.7 1 1.5

Connections Per Second (K) 25 25 40 50 70

Concurrent Sessions (M) 1.2 1.2 1.2 1.2 3.32

Network10/100/1000Base-T/Max Ports 6/6 4/8 8/12 8/12 8/16

1000Base-F SFP (MAX Ports) NA 4 4 4 4

10GBase-F SFP+ (MAX Ports) NA NA NA NA 2

Expansion Slot 0 1 1 1 1

Fail-Open/Bypass NIC Option No Yes Yes Yes Yes

Additional FeaturesStorage 250 GB 250 GB 250 GB 250 GB 250 GB

Memory / Max 4/4 GB 4/4 GB 4/4 GB 4/4 GB 4/8 GB

LOM Card NA NA NA NA Included

Virtual SystemsDefault/Max VS Supported 3/3 3/3 10/10 10/10 25/25

PhysicalEnclosure Desktop 1U 1U 1U 1U

Weight 2kg (4.4 lbs) 4kg (8.82 lbs) 7.5kg (16.53 lbs) 7.5kg (16.53 lbs) 7.6kg (16.76 lbs)

PowerDual, Hot-Swappable Power Supplies No No No No Optional

Power Input 100-240VAC, 47-63Hz

Single Power Supply Rating 40W 100W 250W 250W 275W

Power Consumption (Max) 35W 57W 90W 90W 140W

DC Option No No No Optional3 Optional3

Security Gateway Appliances (released before 2016)

Page 5: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 5

Appliance Comparison Chart

June 7, 2016

1 Assumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protection

2 With memory upgrade and the GAiA OS 3 Via a Solutions Center request

12200 12400 12600 13500 13800

Enterprise Grade

Production Performance (Real-World Traffic Blend)1

SecurityPower 811 1185 2050 3200 3800

Firewall (Gbps) 6.2 9.1 14 23.6 27.2

Firewall and IPS (Gbps) 1.28 2.11 3.58 5.7 6.4

RFC 3511, 2544, 2647, 1242 performance tests (LAB) Firewall Throughput (Gbps) 15 25 30 77 77

VPN Throughput (Gbps) 2.5 3.5 7 17 18.3

IPS Recommended Profile (Gbps) 2.5 3.5 6 7.8 9.6

Connections Per Second (K) 90 110 130 178 190

Concurrent Sessions (M) 52 52 52 282 282

Network10/100/1000Base-T/Max Ports 8/16 10/26 14/26 14/26 14/26

1000Base-F SFP (MAX Ports) 4 12 12 12 12

10GBase-F SFP+ (MAX Ports) 4 12 12 12 12

40GBase-F MAX Ports NA NA NA NA NA

Expansion Slot 1 3 3 3 3

Fail-Open/Bypass NIC Option Yes Yes Yes Yes Yes

Additional FeaturesStorage 1+1 500 GB 1+1 500 GB 2x500 GB RAID 1 2x500GB RAID 1 2x500GB RAID 1

Memory / Max 4/12 GB 4/12 GB 6/12 GB 16/64 GB 16/64 GB

LOM Card Included Included Included Included Included

Virtual SystemsDefault/Max VS Supported 25/502 25/752 75/1502 150/2502 150/2502

PhysicalEnclosure 1U 2U 2U 2U 2U

Weight 7.6kg (16.76 lbs) 23.4kg (51.6 lbs) 23.4kg (51.6 lbs) 17.5 kg (38.6 lbs.) 17.5 kg (38.6 lbs.)

PowerHot-Swappable Power Supplies Optional 2 AC 2 AC 2 AC 2 AC

Power Input 100-240VAC, 47-63Hz

Single Power Supply Rating 275W 300W 400W 600W 600W

Power Consumption (Max) 121W 132W 220W 431W 431W

DC Option Optional3 Optional3 Optional3 Optional Optional

Security Gateway Appliances (released before 2016 continued)

Page 6: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 6

Appliance Comparison Chart

June 7, 2016

1 With Security Acceleration Module 2 With memory upgrade and the GAiA OS 3 Via a Solutions Center request

21400 21700 21800

Data Center Grade

Production Performance (Real-World Traffic Blend)1

SecurityPower 2175/29001 3300/35511 4100/43001

Firewall (Gbps) 17.1/44.31 25.4/44.51 30.4/44.51

Firewall and IPS (Gbps) 3.67 5.7 6.9

RFC 3511, 2544, 2647, 1242 performance tests (LAB) Firewall Throughput (Gbps) 50/1101 78/1101 78/1101

VPN Throughput (Gbps) 7/501 11/501 23.5/501

IPS Recommended Profile (Gbps) 6 8 9.9

Connections Per Second (K) 130/3001 170/3001 198/3001

Concurrent Sessions (M) 102 132 282

Network10/100/1000Base-T/Max Ports 13/37 13/37 13/37

1000Base-F SFP (MAX Ports) 36 36 36

10GBase-F SFP+ (MAX Ports) 12 13 13

40GBase-F MAX Ports NA NA NA

Expansion Slot 3 3 3

Fail-Open/Bypass NIC Option No No No

Additional FeaturesStorage 2x500 GB RAID 1 2x500GB RAID 1 2x500GB RAID 1

Memory / Max 12/24 GB 16/64 GB 16/64 GB

LOM Card Included Included Included

Virtual SystemsDefault/Max VS Supported 125/2502 150/2502 150/2502

PhysicalEnclosure 2U 2U 2U

Weight 26kg (57.4 lbs) 26kg (57.4 lbs) 26kg (57.4 lbs)

PowerHot-Swappable Power Supplies 2 AC 2 AC 2 AC

Power Input 100-240VAC, 47-63Hz

Single Power Supply Rating 910W 1200W 1200W

Power Consumption (Max) 449W/744W1 489W/784W1 489W/784W1

DC Option Optional3 Optional3 Optional3

Security Gateway Appliances (released before 2016 continued)

Page 7: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 7

Appliance Comparison Chart

June 7, 2016

1 Assumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protection2 With 4 x SSM160

41000 61000

Data Center, Telco, Carrier Grade

Production Performance (Real-World Traffic Blend)1

SecurityPower 3200 to 11000 3200 to 33000

Firewall (Gbps) Up to 40 Up to 120

Firewall and IPS (Gbps) Up to 25 Up to 70

RFC 3511, 2544, 2647, 1242 performance tests (LAB) Firewall Throughput (Gbps) Up to 80 Up to 400

VPN Throughput (Gbps) Up to 40 Up to 110

IPS Recommended Profile (Gbps) Up to 44 Up to 130

Connections Per Second (K) Up to 1100 Up to 3000

Concurrent Sessions (M) Up to 80 Up to 210

Network10/100/1000Base-T/Max Ports 14 28

1000Base-F SFP (MAX Ports) 14 28

10GBase-F SFP+ (MAX Ports) 30 602

40GBase-F MAX Ports 4 82

Expansion Slot 6 14

Fail-Open/Bypass NIC Option No No

Additional FeaturesStorage - -

Memory 64 GB 64 GB

LOM Card Included Included

Virtual SystemsMax VS Supported 250 250

PhysicalEnclosure 6U 15U

Weight Max: 38.6kg (84.9 lbs) Max: 65.84kg (145.2 lbs)

PowerHot-Swappable Power Supplies 3 AC or 2 DC 4 AC or 2 DC

Power Input See data sheet

Single Power Supply Rating 1200W@110V; 1500W@220V

2500W @ 208V/230V, 1500W @ 110V (USA), 1300W @ 100V (Japan)

Power Consumption (Max) 2300W 4900W

DC Option Yes Yes

Security Systems

Page 8: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 8

Appliance Comparison Chart

June 7, 2016

1120 1140 1180 1430 1450 1470 1490

PerformanceSecurityPower 28 34 37 75 141 194 233

Firewall (Mbps) 20 50 100 900 1100 1600 1800

Threat Prevention (Mbps) 10 25 50 90 150 175 220

Lab (RFC 3511, 2544, 2647, 1242 Performance Tests)Firewall Throughput (Gbps) 750 Mbps 1.0 1.5 2 2.5 3.2 4

Connections Per Second (K) 5 5 5 18 25 30 40

Concurrent Sessions (K) 200 200 200 500 500 500 500

VPN Throughput (Mbps) 140 175 220 250 500 500 1000

NetworkWireless Option 802.11 b/g/n 802.11 b/g/n/ac 802.11 b/g/n and 802.11 n/ac

ADSL2/ADSL2+ (Annex A or B) Yes - -

10/100/1000Base-T Ports 10 8 18

1000Base-F Ports 0 0 1

Additional FeaturesSecurity Architecture Embedded GAiA Embedded GAiA Embedded GAiA

3G, 4G Modem Support Yes Yes Yes

SD Card Slot SD Micro SDHC slot Micro SDHC slot

Web-based Management Available Available Available

Central Management Model Enterprise Security Management Enterprise Security Management Enterprise Security Management

PhysicalEnclosure Desktop Desktop Desktop

Weight 1.2kg (2.65 lbs) 1.3kg (2.8 lbs) 1.6kg (3.6 lbs)

PowerPower Input 100/240VAC, 50-60Hz 100/240VAC, 50-60Hz 100/240VAC, 50-60Hz

Single Power Supply Rating 12V/2A 24W - 12V/2.5A 30W (ADSL and Wi-Fi models) 12V/3.33A 40W desktop adaptor 12V/5.4A 65W desktop adaptor

Power Consumption (Max) 16.68W 25W (non-Wi-Fi), 30W (Wi-Fi option) 55W (non-Wi-Fi), 60W (Wi-Fi option)

Small Branch Office Security Appliances

Page 9: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 9

Appliance Comparison Chart

June 7, 2016

1200R

Production Performance (Real-World Traffic Blend)1 SecurityPower 49

Firewall (Mbps) 700

Firewall and IPS (Mbps) 60

RFC 3511, 2544, 2647, 1242 performance tests (LAB) Firewall Throughput (Gbps) 2

VPN Throughput (Mbps) 450

Connections Per Second (K) 10

Concurrent Sessions (K) 400

Network10/100/1000Base-T (Max) 6

1000Base-F (Max) 2

Additional Features3G/4G Yes

Serial Console Port Yes

Mount Options DIN rail

Central Management Model Enterprise Security Management

CertificationsIndustrial IEC 61850-3, IEEE 1613, IEC 60068-2

Operating EnvironmentTemperature -40°to167°F / -40° to 75°C

Humidity 20%-90% (non-condensing)

PhysicalEnclosure Desktop

Weight 1.2 kg (2.65 lbs.)

PowerAC 100-240V, 50–60 Hz

DC 12V-72V, -48V DC

Power Consumption (Max) 15W

Rugged Appliances1

1 Also see the [Siemens RUGGEDCOM APE (Application Processing Engine) Line Module]

Page 10: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 10

Appliance Comparison Chart

June 7, 2016

X20 X30 X50 X60 X80-S

PerformanceFirewall IMIX Chassis Throughput (Gbps) Up to 5 Up to 10 Up to 18 Up to 70 Up to 140

XOS Stateful Connections Per Second Up to 120K Up to 120K Up to 150K Up to 300K Up to 600K

XOS Stateless Connections Per Second NA (not enabled) NA (not enabled) Up to 220K Up to 550K Up to 1.1M

Maximum Concurrent Connections 8M 8M 18M 70M 100M

Network

Interfaces 10 x 1Gb SFP ports 10 x 1Gb SFP ports; 2 x 10Gb XFP ports Up to 16 x 10/1Gb SFP+ ports Up to 32 x 1Gb SFP/10Gb SFP+

(16 per NPM)Up to 64 x 1Gb SFP/10Gb SFP+

(16 per NPM)

Modules Support 1 NPM-x, up to 2 APM-x, and 1 CPM-x (included) Up to 2 NPM-x, up to 5 APM-x, up to 2 CPM-x

Up to 4 NPM-x, up to 10 APM-x, up to 2 CPM-x

Maximum Modules Up to 4 Up to 7 Up to 14

Application Processor Module (APM) DetailsProcessors (per APM) 8 core 4, 8 or 12 core options

System Memory (per APM) Up to 16 GB Up to 12 GB Up to 24 GB

Disk Size (per APM) Up to 2 x 500GB SATA Hard Drives with RAID 1 Up to 2 x 450GB SAS with RAID 1

Additional Features Check Point Software Security Gateway R77, R76, R75.40, R75.40VS, R75.20, R75, R71.10; Firewall-1 GX 5.0

Supported Operating System XOS 9.0.x, 9.5.x, 9.6.x and 9.7.x

High Availability Options Dual Box High Availability (DBHA) with another chassis of the same model

System Management X-Series Management System (XMS), Greenlight Elelment Manager (GEM), Command line interface (CLI) with automated workflow system (AWS), SNMP v1 v2 v3 and NetFiow v5 v9 v10 support

Physical Form Factor / Size 13.5” H, 17.5” W, 19” D 29” H, 17.5” W, 17.5” D

Environment Temperature 0 to 40’ C (32-104’F); Humidity: 10%- 90% non-condensing; Altitude: 3048m (10,000ft.)

Certification FIPS 140-2 Certified; Under evaluation for Common Criteria EAL4+ Network Equipment Building System (NEBS) Compliant; Under evaluation for Common Criteria EAL4+

Chassis Regulatory Compliance RoHS, UL 60950, IEC 950, FCC 47 CFR Part 15 Class A, EN 55022: EN 55024, VCCI V-3: AS/NZS 3548: 1995 : CNS 13438 Class A

Green IT Compliancy High-efficiency power system up to 91 percent, WEEE Directive, ISO 14001, RoHS compliant

Power

Power Specifications 100-240 VAC 2,700W Rated Maximum 100-240 VAC 5,100W Rated Maximum or 48V DC 100A

Hot-Swappable PSUs (per system) Ships with 2 x 1,200W 120-240 VAC PSUs 4 PSUs supported

Status Indicators Power Supply and Module Active I Failed status LED, Port Link (NPM, CPM), Minor/Major/Critical Alarm LEDs

X-Series Platforms

Page 11: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 11

Appliance Comparison Chart

June 7, 2016

1 Actual performance figures may change per network configuration, traffic type, etc. 2 Throughput is measured with behavioral and signature protections using the eCommerce protection profile3 External fiber fail-open switch with SFP ports is available at additional cost 4 External fiber fail-open switches with SFP or XFP ports are available at additional cost

506 1006 2006 4412 8412 12412 10420 20420 30420 40420

Network Grade Enterprise Datacenter Carrier

Performance1

Capacity (Gbps)2 0.5 1 2 4 8 14 10 20 30 40

Throughput (Gbps)2 0.5 1 2 4 8 12 10 20 30 40

Max Concurrent Sessions (M) 2 2 2 4 4 4 6 6 6 6

Max DoS Flood Attack Prevention Rate (M)(pps) 1 1 1 10 10 10 25 25 25 25

Latency < 60 micro seconds

Real-time Signatures Detect and protect against attacks in less than 18 seconds

Network

Inspection Ports10/100/1000 Copper Ethernet 4 4 4 8 8 8 - - - -

1GbE Fiber (SFP) 2 2 2 4 4 4 - - - -

10GbE Fiber (XFP) - - - 4 4 4 - - - -

1/10 GbE (SFP+) - - - - - - 20 20 20 20

40 GbE (QSFP+) - - - - - - 4 4 4 4

Management Ports10/100/1000 Copper 2 2 2 2 2 2 2 2 2 2

RS-232 Console 1 1 1 1 1 1 1 1 1 1

Operation ModeNetwork Operation Transparent L2 Forwarding

Deployment Modes In-line; span port monitoring; copy port monitoring; local out-of-path; out-of-path mitigation (scrubbing center solution)

Tunneling protocols support VLAN Tagging, L2TP, MPLS, GRE, GTP

IPv6 Support IPv6 networks and block IPv6 attacks

Policy Action Block and Report; Report Only

Block Actions Drop packet, reset (source, destination, both), suspend (source, source port, destination, destination port or any combination); Challenge-Response for HTTP and DNS attacks

High Availability

Fail-open / Fail-closeInternal fail-open/fail-close for copper ports;

internal fail-close for SFP ports; optional fail-open for SFP ports3

Internal fail-open/fail-close for copper ports; internal fail-close for SFP and XFP ports; optional fail-open for SFP and XFP ports4

Internal fail-close for SFP+ and QSFP+ ports; optional fail-open for SFP+ and QSFP+ ports4

Clustering Active-Passive Cluster

PhysicalEnclosure 1U 2U

PowerDual Power Supply Optional Yes - Hot Swappable

Power Consumption (Max) 177W 476W 634W

DDoS Protector

Page 12: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 12

Appliance Comparison Chart

June 7, 2016

Virtual Systems Appliances4400

Single Unit4400 VSLS

4600 Single Unit

4600 VSLS

4800 Single Unit

4800 VSLS

5600 Single Unit

5600 VSLS

5800 Single Unit

5800 VSLS

12200 Single Unit

12200 VSLS

Performance

Firewall Throughput (Gbps) 5 9 9 16.2 11 19.8 25 45 35 63 15 27

VPN Throughput (Gbps) 1.2 2.1 1.5 2.7 2 3.6 6.5 11 10 18 2.5 4.5

Concurrent Sessions (M) 1.2 1.4 1.2 1.4 3.31 3.91 6.4 11 6.4 11 51 61

12400 Single Unit

12400 VSLS

12600 Single Unit

12600 VSLS

13500 Single Unit

13500 VSLS

13800 Single Unit

13800 VSLS

15400 Single Unit

15400 VSLS

15600 Single Unit

15600 VSLS

Performance

Firewall Throughput (Gbps) 25 45 30 54 77 138.6 77 138.6 58 104 77 139

VPN Throughput (Gbps) 3.5 6.3 6 10.8 17 30.6 18.3 32.9 10.8 19 15.8 28

Concurrent Sessions (M) 51 61 51 61 281 33.61 281 33.61 9.61 161 12.81 211

21400 Single Unit

21400 VSLS

21700 Single Unit

21700 VSLS

21800 Single Unit

21800 VSLS

23500 Single Unit

23500 VSLS

23800 Single Unit

23800 VSLS

Performance

Firewall Throughput (Gbps) 50 90 78 140.4 78 140.4 116 209 128 230

VPN Throughput (Gbps) 7 12.6 11 27 23.5 42.3 26 46 26 46

Concurrent Sessions (M) 101 121 131 15.61 281 33.61 25.6 42 28 46

Public and Private Cloud Virtual AppliancesVMware ESX

4.0/4.1VMware vSphere

5/5.1/5.5VMware vShpere

6.0/6.1VMware NSX Manager 6.1.x

KVM Microsoft Hyper-V Amazon AWS Microsoft Azure OpenStack

vSEC Network Mode vSEC Hypervisor Mode Security Management Multi-Domain Security Management

1 With memory upgrade and GAiA OS

Page 13: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 13

Appliance Comparison Chart

June 7, 2016

= Available

Software Blades Appliance Comparison ChartNGFW NGDP NGSWG NGTP NGTX

23800 23500 21800 21700 21400 15600 15400 13800 13500 12600 12400 12200 5800 5600 5400 5200 4800 4600 4400 4200 3200 2200 1200R 1400 1100

Page 14: Appliance Comparison Chart · Appliance Comparison Chart une 7, 2016 1 Aassumes maximum production throughput with real-world traffic blend, a typical rule-base size, ...

©2016 Check Point Software Technologies Ltd. All rights reserved. Classification: [Protected] — All rights reserved. | 14

Appliance Comparison Chart

June 7, 2016

NGFW NGDP NGSWG NGTP NGTX

Security Gateway Software Blades

Firewall Identity Awareness IPsec VPN Advanced Networking & Clustering Mobile Access IPS Application Control DLP URL Filtering Antivirus Anti-Spam Anti-Bot SandBlast Threat Emulation SandBlast Threat Extraction Security Management Software Blades

Network Policy Management Logging & Status SmartEvent

= Included

Optional Security Management Software Blades available: SmartWorkflow, Monitoring, Management Portal, User Directory, SmartProvisioning, SmartReporter, SmartEvent, Endpoint Policy Management, Compliance

Software Blades Appliance Comparison Chart (Continued)

Mobile Access Sofware Blade:The 23000, 21000, 15000, 13000, 12000, 5000, 4000, 3200 and 2200 include 5 users in the default package and this can be extended using the Mobile Access packagesThe 1200R includes Mobile Access for 20 usersThe 1430/1450 and 1470/1490 include Mobile Access for 100 and 200 users respectively The 1120, 1140, 1180 includes Mobile Access for 5, 10 and 20 users respectively